Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x9h6-qwxm-528g

Опубликовано: 04 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 3.9

Описание

Android apps can load web pages using the Custom Tabs feature. This feature supports a transition animation that could have been used to trick a user into granting sensitive permissions by hiding what the user was actually clicking. This vulnerability affects Firefox < 136.

Android apps can load web pages using the Custom Tabs feature. This feature supports a transition animation that could have been used to trick a user into granting sensitive permissions by hiding what the user was actually clicking. This vulnerability affects Firefox < 136.

EPSS

Процентиль: 7%
0.00175
Низкий

3.9 Low

CVSS3

Дефекты

CWE-359

Связанные уязвимости

CVSS3: 3.9
ubuntu
больше 1 года назад

Android apps can load web pages using the Custom Tabs feature. This feature supports a transition animation that could have been used to trick a user into granting sensitive permissions by hiding what the user was actually clicking. This vulnerability was fixed in Firefox 136.

CVSS3: 7.1
redhat
больше 1 года назад

Android apps can load web pages using the Custom Tabs feature. This feature supports a transition animation that could have been used to trick a user into granting sensitive permissions by hiding what the user was actually clicking. This vulnerability was fixed in Firefox 136.

CVSS3: 3.9
nvd
больше 1 года назад

Android apps can load web pages using the Custom Tabs feature. This feature supports a transition animation that could have been used to trick a user into granting sensitive permissions by hiding what the user was actually clicking. This vulnerability was fixed in Firefox 136.

CVSS3: 3.9
debian
больше 1 года назад

Android apps can load web pages using the Custom Tabs feature. This fe ...

EPSS

Процентиль: 7%
0.00175
Низкий

3.9 Low

CVSS3

Дефекты

CWE-359